[OOM] Fixing k8s resources and limits

[oom.git] / kubernetes / so / components / so-admin-cockpit / values.yaml

diff --git a/kubernetes/so/components/so-admin-cockpit/values.yaml b/kubernetes/so/components/so-admin-cockpit/values.yaml
index a825e16..ce347fe 100644 (file)
--- a/kubernetes/so/components/so-admin-cockpit/values.yaml
+++ b/kubernetes/so/components/so-admin-cockpit/values.yaml
@@ -111,26 +111,26 @@ resources:
   small:
     requests:
       memory: 1Gi
-      cpu: 10m
+      cpu: 999
     limits:
       memory: 4Gi
-      cpu: 1
+      cpu: 0.25
   large:
     requests:
       memory: 2Gi
-      cpu: 20m
+      cpu: 999
     limits:
       memory: 8Gi
-      cpu: 2
+      cpu: 0.5
   unlimited: {}
 readinessProbe:
   port: 9091
-  initialDelaySeconds: 20
+  initialDelaySeconds: 40
   periodSeconds: 10
   timeoutSeconds: 10
 livenessProbe:
   port: 9091
-  initialDelaySeconds: 40
+  initialDelaySeconds: 80
   periodSeconds: 10
   timeoutSeconds: 10
   successThreshold: 1
@@ -143,6 +143,13 @@ ingress:
     port: 9091
   config:
     ssl: "none"
+serviceMesh:
+  authorizationPolicy:
+    authorizedPrincipals:
+      - serviceAccount: portal-app-read
+      - serviceAccount: so-read
+      - serviceAccount: istio-ingress
+        namespace: istio-ingress
 nodeSelector: {}
 tolerations: []
 affinity: {}